Description
A weakness has been identified in 1000projects Online Project Report Submission and Evaluation System 1.0. Affected by this vulnerability is an unknown functionality of the file /rse/admin/edit_faculty.php?id=2. This manipulation of the argument Name causes cross site scripting. The attack is possible to be carried out remotely. The exploit has been made available to the public and could be exploited.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| 1000projects | Online Project Report Submission and Evaluation System | 1.0 | — |
References
- VDB-321278 | 1000projects Online Project Report Submission and Evaluation System edit_faculty.php cross site scripting vdb-entry technical-description
- VDB-321278 | CTI Indicators (IOB, IOC, TTP, IOA) signature permissions-required
- Submit #634197 | 1000projects.org Online Project Report Submission and Evaluation System v1.0 Cross Site Scripting third-party-advisory
- https://github.com/lan041221/cvec/issues/13 exploit issue-tracking